CHSAssistPrivacy Policy
Last updated: 12 October 2026
Clean Harvest Solutions (Pty) Ltd ("we") runs CHSAssist. This policy explains what personal information we handle, why, and your rights. It is written to meet South Africa's POPIA, the UK GDPR and common US expectations.
Two roles. For your own account details we decide how they're used (we are the "responsible party" / "controller"). For the information you put into CHSAssist about your customers and workers, you decide; we only process it on your instructions to run the service (we are your "operator" / "processor").
What we collect
- Account details: name, email, password (stored hashed), business name, time zone, team members.
- Your business data: leads, customers, workers, jobs, appointments, quotes, invoices, notes and messages you create or receive through CHSAssist.
- Contact-form submissions sent to your business through your CHSAssist form, including the visitor's consent wording.
- Settings such as your payment link and Twilio details (your Twilio auth token is stored encrypted).
- Technical data: login sessions, basic logs, and a hashed (not raw) IP address used to block form spam.
- Billing details are collected and held by our payment provider (Paddle), not by us. We see your plan and payment status only.
Why we use it. To provide and secure the service, send the messages you set up, bill your subscription, give support, and meet legal duties. We don't sell personal information and don't use it for advertising.
Who we share it with. Only the service providers we need to run CHSAssist:
| Provider | What it does |
|---|---|
| Supabase | Database and sign-in |
| Vercel | Hosts the website and app |
| Paddle | Takes payments as Merchant of Record |
| Resend | Sends emails |
| Twilio | Texts and calls, from the business's own Twilio account |
| Anthropic | AI features (when switched on); not used to train AI models |
We may also disclose information when the law requires it.
Where it's stored. Our providers store data on servers outside South Africa (for example in the US or EU). We use providers that protect it with security measures and contracts in line with POPIA and the UK GDPR.
How long we keep it. While your account is active. After you close it, we delete your business data within 30 days, except what we must keep for tax or legal reasons.
Security. Encrypted connections (HTTPS), per-business access controls so no business can see another's data, encrypted secrets, and limited staff access. No system is perfect; if a breach affects you, we will tell you and the regulator as the law requires.
Cookies. We use only the cookies needed to keep you signed in and remember your chosen business, plus a small browser setting for the sidebar. No advertising or tracking cookies.
Your rights. You can ask to see, correct, export or delete your personal information, or object to how it's used, by emailing support@chsassist.com. If your customers or workers ask us about their data, we'll pass the request to you as their business. You can complain to South Africa's Information Regulator (inforegulator.org.za) or, in the UK, the ICO (ico.org.uk).
Children. CHSAssist is for businesses and isn't meant for anyone under 18.
Changes. We'll update the date above and email account owners about important changes.
Contact / Information Officer. Khomotso Maluleka, Clean Harvest Solutions (Pty) Ltd, 5116 Zambesi Street, Embalenhle Ext 9, Secunda, Mpumalanga, 2285, South Africa, support@chsassist.com.
Terms · Refund Policy · Privacy Policy · Home